PIQ applications for JWT, encryption

[sal rashid]

hi-

Most of the threads in this forum covers deep technical details but  if there's interest in applications, i put together some code samples and applications related to PQC.

 I can't contribute towards the technial depth covered in most of the topics but i think some of the applications here maybe of help later on.  Please do let me know if you see any improvements or if i'm doing something outright wrong here (preferably as a github issue or even here)

1)    https://github.com/salrashid123/pqc_scratchpad   

      * mostly unsorted scratchpad/sample set of using mldsa/mlkem in go, python

2) https://github.com/salrashid123/golang-jwt-pqc

    * generating mldsa based JWTs in go using PEM files and keys  in AWS KMS and Google Cloud KMS.  Uses the candidate/proposed api for the next version of go

3) https://github.com/salrashid123/jwe-pqc

     * json web encryption (jwe) using MLKEM

4) https://github.com/salrashid123/go-pqc-wrapping

     *  go cli and library for MLKEM to wrap+transfer some data

  

          and same for python  https://github.com/salrashid123/python_pqc_wrapping

5)  encrypt docker (oci) containers image layers using MLKEM

      https://github.com/salrashid123/ocicrypt-pqc-keyprovider

    

6) mlkem with TPM based random source as the seed 

     https://github.com/salrashid123/pqc_scratchpad/blob/main/README.md#mlkem-tpm

    * this one is pretty suspect to me and its practical utility.. . Basically just generating random and using that directly as seed as-is....i don't know if i can 'just use' random squence here as the two values directly..

Again, these are just experimental.

-sal

[sal rashid]

There's also  specifications for MLKEM and MLDSA support for Trusted Platform Modules (TPM) in rev.185

Atleast WolfTPM has support for that now but libraries (go-tpm) and tools (tpm2_tools) are still lacking.

however, just as a test, i modified go-tpm and have some basic samples for mldsa and mlkem:

https://github.com/salrashid123/pqc_scratchpad/tree/main/tpm

eventually, it'd be useful to benchmark operations against real hardware TPMs